Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Friday September 13 2019, @06:22AM   Printer-friendly

Submitted via IRC for Bytram

1B Mobile Users Vulnerable to Ongoing 'SimJacker' Surveillance Attack

More than one billion mobile users are at risk from a SIM card flaw being currently exploited by threat actors, researchers warn.

A vulnerability discovered in mobile SIM cards is being actively exploited to track phone owners’ locations, intercept calls and more – all merely by sending an SMS message to victims, researchers say.

Researchers on Thursday disclosed what they said is a widespread, ongoing exploit of a SIM card-based vulnerability, dubbed “SimJacker.” The glitch has been exploited for the past two years by “a specific private company that works with governments to monitor individuals,” and impacts several mobile operators – with the potential to impact over a billion mobile phone users globally, according to by researchers with AdaptiveMobile Security.

“Simjacker has been further exploited to perform many other types of attacks against individuals and mobile operators such as fraud, scam calls, information leakage, denial of service and espionage,” said researchers with AdaptiveMobile Security in a post breaking down the attack, released Thursday.

They said they “observed the hackers vary their attacks, testing many of these further exploits. In theory, all makes and models of mobile phone are open to attack as the vulnerability is linked to a technology embedded on SIM cards.”

The attack stems from a technology in SIM cards called S@T Browser (short for SIMalliance Toolbox Browser). This technology, which is typically used for browsing through the SIM card, can be used for an array of functions such as opening browsers on the phone as well as other functions like setting up calls, playing ring tones and more.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by JoeMerchant on Friday September 13 2019, @02:10PM (3 children)

    by JoeMerchant (3937) on Friday September 13 2019, @02:10PM (#893640)

    Is the article helpful enough to identify if a particular SIM card is vulnerable, and/or has been compromised?

    --
    🌻🌻 [google.com]
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2) by Rosco P. Coltrane on Friday September 13 2019, @02:13PM (2 children)

    by Rosco P. Coltrane (4757) on Friday September 13 2019, @02:13PM (#893643)

    Lazy and probably accurate answer: assume yes. If not, you're being shafted in many other ways anyway with your cellphone. So yes.

    • (Score: 2) by JoeMerchant on Friday September 13 2019, @03:10PM (1 child)

      by JoeMerchant (3937) on Friday September 13 2019, @03:10PM (#893674)

      Oh, c'mon, the scare-bar only claims one billion vulnerable, out of what, like five billion SIM cards in use worldwide? And, actually compromised, that's going to be even less.

      --
      🌻🌻 [google.com]
      • (Score: 2) by Freeman on Friday September 13 2019, @03:49PM

        by Freeman (732) on Friday September 13 2019, @03:49PM (#893701) Journal

        That's still 1 out of 5 or 20% of all SIM cards. Is this an old bug or a current "feature"?

        From the linked article:

        While researchers say that the S@T protocol is used by mobile operators in at least 30 countries whose population adds up to over a billion people, in an email to Threatpost, the GSMA that the “potential vulnerability” impacts a “small minority of SIM cards.”

        “This research specifically considers SIM cards which make use of a technology not used by most mobile operators, and requires a user to be sent specially coded messages containing commands for the SIM card,” a GSMA spokesperson told Threatpost. “The potential vulnerability is understood to not be widespread and mitigations have been developed for affected mobile networks to implement.”

        So, it sounds like it's not terrible. Still, if you'd have reason to be worried about the authorities in any given nation you're visiting. I would highly recommend getting a burner phone for said country or something. Better yet, don't visit said country.

        --
        Joshua 1:9 "Be strong and of a good courage; be not afraid, neither be thou dismayed: for the Lord thy God is with thee"